Most business owners think of hackers as figures typing away at code in dark rooms, who break into computers via IT vulnerabilities. In reality, smaller companies are rarely attacked in this way. It is much simpler to pick up the phone or send a deceptive email, as they exploit people’s good faith, haste and respect for authority.
Attackers rely on psychology, and there are four scenarios that a small domestic business is almost certain to encounter in its day-to-day operations.
The fake invoice and the changed bank account number
An email arrives from a long-standing, trusted supplier. Attached to the email is the usual monthly invoice, and the text includes a small note: the company has changed banks, so they are asking for the amount to be transferred to the new account number. The sender’s details, the logo, and even the contact person’s signature all appear genuine.
In such cases, the attacker has actually hacked into the partner’s email account or registered a web address that differs from the genuine one by just one or two letters. If the accountant or company director makes the transfer as a matter of routine, the money ends up in a stranger’s account, from where it is withdrawn or transferred elsewhere within minutes.
Telephone banking fraud
The phone rings; the caller introduces themselves as a member of the security team at a major domestic bank. In a firm, polite but urgent tone, they state that they have detected suspicious activity on the company’s account and that someone is currently attempting to withdraw several million forints.
Panic instantly shuts down logical thinking. The caller promises immediate help; all you need to do is install a security app on your phone or computer. This software actually grants remote access to the fraudsters, who can then immediately take control of your online banking account.
Text messages purporting to be from the National Tax and Customs Administration (NAV) and courier services
A text message arrives on your phone stating that a parcel delivery has been held up due to an incomplete address, or that the NAV has identified an outstanding payment which must be settled immediately to avoid a fine. The message contains a link.
The link takes you to a website that looks deceptively similar to the interface of the post office, the courier company or the tax authority. There, you are asked to provide your bank card details to make the payment. As soon as you enter your card number and the three-digit security code, funds are immediately debited from your account.
An urgent letter purporting to be from the managing director
This scam works best in offices with just a few staff members. The administrator or assistant receives an email, ostensibly sent directly by the managing director: “I’m in a meeting and can’t take calls. Please transfer this amount to this account immediately, otherwise we’ll lose the contract.”
The employee doesn’t dare to ask for clarification; they’re afraid of their boss’s anger and don’t want to cause trouble for the company. Under time pressure, they fulfil the request without checking it.
Vélemény, hozzászólás?